John Babione

John is a member of the Constangy Cyber Team. He provides compliance advisory services to clients by proactively navigating the legal landscape of data privacy and security. John advises clients on a wide range of state, federal, and international privacy laws, including the California Consumer Privacy Act (CCPA), California Privacy Rights Act (CPRA), the European Union General Data Protection Regulation (GDPR), and other state and federal privacy laws.

He brings experience drafting data privacy policies to help businesses communicate their practices to consumers and analyzing contracts to address privacy and cybersecurity issues related to collecting and processing information. John also assists businesses in creating plans for a prompt and effective response to data privacy and security incidents to protect confidential information.

John relies on substantial, complex litigation experience in a variety of matters affecting businesses, including employee data theft and government investigations, to guide clients away from liability via policies and data privacy and security-related agreements.  He also represents clients facing privacy and data breach related litigation matters.

John advises clients on a wide range of data governance and risk-related legal issues affecting businesses, including risk management, vendor management, information governance practices, and data retention and destruction. He assists businesses in navigating regulatory compliance requirements for their online and offline operations.

John is a Certified Information Privacy Professional for U.S. law (CIPP/US) and a Certified Information Privacy Manager (CIPM) through the International Association of Privacy Professionals (IAPP).

• Recognized in The Best Lawyers in America^® for Mass Tort Litigation/Class Actions - Defendants (2024-2025)
• Recognized as "Lawyer of the Year" for Mass Tort Litigation/Class Actions - Defendants, Indianapolis for The Best Lawyers in America^® (2025)
• Indianapolis Bar Foundation Distinguished Fellow, 2019

Associations

• Indiana Executive Council on Cybersecurity (IECC)
  • Advisory member 
  • Personally Identifiable Information Working Group, 2019-2023
• International Association of Privacy Professionals (IAPP)
  
  • Indianapolis KnowledgeNet Chapter co-chair (2020-2021)
• Defense Research Institute (DRI)
  • Privacy SLG, vice chair (2019)
  • Data Management and E-Discovery SLG
• InfraGard
• Indianapolis Bar Association
  • E-Discovery, Information Governance & Cybersecurity Steering Committee
• Georgia Bar Association
  
  • Privacy & Technology section

Certifications

• Certified Information Privacy Professional (CIPP) for United States law (US) through the International Association of Privacy Professionals (IAPP)
• Certified Information Privacy Manager (CIPM) through the International Association of Privacy Professionals (IAPP)

Pro Bono & Philanthropy

• St. Mark’s United Methodist Church
  • Trustees President (2022)
  • Trustees Committee (2020-2022)
• Stafford Place Board of Directors (2016-present)
• Joy’s House, a non-profit adult daycare organization in Indianapolis
  • Board of Directors (2013-2016)
  • Board adviser and chair of the Governance Committee
    (2009-2016)
• Indianapolis Bar Association
  • Ask a lawyer and Legal Line volunteer (2006-2012)